CVE-2026-40721

A vulnerability has been discovered in Element Pack Pro plugins prior to version 9.0.7, which allows an attacker with contributor-level access to inject arbitrary local files into the application through a malformed input field. This flaw can be exploited by manipulating user input to bypass security checks and gain unauthorized access to sensitive data or system resources.

Based on public CVE data (MITRE/NVD).